Ambient backscatter systems enable passive sensing and information transfer by utilizing the reflection and modulation of incident radio-frequency (RF) signals. However, in real-world scenarios involving non-cooperative targets such as off-the-shelf printed circuit boards (PCBs), the backscattered signal is extremely weak and often obscured by strong direct-path self-interference (SI) at the receiver. This issue becomes even more severe when unintentional PCB structures act as radiating elements. In this work, we explore ambient backscatter leakage from a compromised PCB using a realistic measurement setup that includes separated transmit and receive antennas and a direct-conversion Universal Software Radio Peripheral (USRP)-based receiver. We demonstrate that residual carrier frequency offset (CFO), caused by oscillator mismatch and hardware imperfections, can spread the dominant SI in the baseband and completely mask the weak backscattered signal. To solve this problem, a software-based post-processing framework is applied. This method leverages the complex baseband representation enabled by the homodyne receiver to jointly manage the carrier and SI components without relying on intermediate-frequency processing or prior knowledge of the target signal parameters. Experimental results show that this approach significantly improves the detectability of weak backscattered baseband information that would otherwise be concealed within the raw I/Q data. This study emphasizes the importance of CFO-aware digital processing in ambient backscatter systems and offers new insights into unintended electromagnetic leakage mechanisms from commercial PCB platforms.
Degefa et al. (Sat,) studied this question.